Settings catalog
Generated reference for Sistema e sicurezza. Lists field names and purposes, without saved values, VPS configuration or credentials.
Only Netter administrators can propose revisions. Read System configuration for saving, applying and restoring settings. Leaving a secret field blank preserves its previous value.
HTTP protection
| Key | Purpose | Type | Affected services |
|---|---|---|---|
WAF_MODE | OWASP CRS mode | select | waf |
WAF_PARANOIA | CRS paranoia level | integer | waf |
WAF_THRESHOLD | Anomaly threshold | integer | waf |
WAF_BLOCKED_CIDRS | Manually blocked IPs/networks (comma-separated) | cidrs | waf |
WAF_PUBLIC_BLOCKLISTS | Block public reputation-list entries | boolean | waf |
WAF_ALLOWED_CIDRS | Public reputation-list exceptions | cidrs | waf |
AUTH_IP_BURST | Login burst per IP | integer | waf |
API_IP_BURST | API burst per IP | integer | waf |
API_IP_CONNECTIONS | Concurrent API requests per IP | integer | waf |
API_GLOBAL_CONNECTIONS | Total concurrent API requests | integer | waf |
AUTH_IP_RPM | Login requests per minute/IP | integer | waf |
API_IP_RPM | API requests per minute/IP | integer | waf |
WEB_IP_RPM | Web requests per minute/IP | integer | waf |
EDGE_BURST | Web burst per IP | integer | waf |
EDGE_CONNECTIONS | Concurrent connections per IP | integer | waf |
EDGE_BODY_MB | Maximum request size (MiB) | integer | waf |
Inference
| Key | Purpose | Type | Affected services |
|---|---|---|---|
KEY_RPM_LIMIT | Requests per minute per key/user | integer | gateway |
TENANT_RPM_LIMIT | Requests per minute per company | integer | gateway |
GLOBAL_RPM_LIMIT | Total requests per minute | integer | gateway |
OPENROUTER_MANAGEMENT_KEY | OpenRouter management key | secret | control |
UPSTREAM_BALANCE_ALERT_USD | Provider low-balance alert threshold (USD) | decimal | control |
PII
| Key | Purpose | Type | Affected services |
|---|---|---|---|
PII_CONCURRENCY | Local PII concurrency | integer | pii |
PII_QUEUE_LIMIT | Local PII queue limit | integer | pii |
Identity
| Key | Purpose | Type | Affected services |
|---|---|---|---|
GOOGLE_ENABLED | Google sign-in | boolean | external management / agent |
GOOGLE_CLIENT_ID | Google client ID | text | external management / agent |
GOOGLE_CLIENT_SECRET | Google client secret | secret | external management / agent |
REGISTRATION_ALLOWED | Local registration | boolean | external management / agent |
LOGIN_FAILURES | Failed attempts before blocking | integer | external management / agent |
LOGIN_WAIT_SECONDS | Wait after failed attempts (seconds) | integer | external management / agent |
Notifications
| Key | Purpose | Type | Affected services |
|---|---|---|---|
SMTP_HOST | SMTP host | host | worker |
SMTP_PORT | SMTP TLS port | select | worker |
SMTP_FROM | Sender address | worker | |
SMTP_USER | SMTP user | text | worker |
SMTP_PASSWORD | SMTP password | secret | worker |
NTFY_ENABLED | Offer ntfy notifications | boolean | control, worker |
Mail
| Key | Purpose | Type | Affected services |
|---|---|---|---|
MAIL_FORWARD_TO | Incoming mail forwarding destination | external management / agent |
Billing
| Key | Purpose | Type | Affected services |
|---|---|---|---|
BANK_IBAN | Top-up IBAN | text | control, billing |
BANK_BENEFICIARY | Bank-transfer beneficiary | text | control, billing |
VAT_RATE | VAT rate (0–1) | decimal | control, billing |
TAX_CONFIGURED | Tax configuration approved | boolean | control, billing |
OPEN_EXCHANGE_RATES_APP_ID | Open Exchange Rates App ID | secret | worker |
STRIPE_SECRET_KEY | Stripe API key | secret | control |
STRIPE_WEBHOOK_SECRET | Stripe webhook secret | secret | control |
STRIPE_TAX_CODE | Stripe Tax product code | text | control |
Legal documents
| Key | Purpose | Type | Affected services |
|---|---|---|---|
LEGAL_VERSION | Legal document version | text | control |
LEGAL_TERMS_URL | Terms URL | url | control |
LEGAL_PRIVACY_URL | Privacy URL | url | control |
Storage and backup
| Key | Purpose | Type | Affected services |
|---|---|---|---|
S3_BUCKET | Bucket | text | control, postgres |
S3_REGION | Region | text | control, postgres |
S3_ENDPOINT | HTTPS endpoint | url | control, postgres |
S3_ACCESS_KEY_ID | Access key ID | secret | control, postgres |
S3_SECRET_ACCESS_KEY | Secret access key | secret | control, postgres |
BACKUP_ENABLED | External PostgreSQL backup | boolean | postgres |
Monitoring
| Key | Purpose | Type | Affected services |
|---|---|---|---|
METRICS_RETENTION_DAYS | Metrics retention (days) | integer | prometheus |
Resources
| Key | Purpose | Type | Affected services |
|---|---|---|---|
MEM_TRAEFIK_MB | traefik · memory limit (MiB) | integer | traefik |
MEM_WAF_MB | waf · memory limit (MiB) | integer | waf |
MEM_CONTROL_MB | control · memory limit (MiB) | integer | control |
MEM_BILLING_MB | billing · memory limit (MiB) | integer | billing |
MEM_GATEWAY_MB | gateway · memory limit (MiB) | integer | gateway |
MEM_WORKER_MB | worker · memory limit (MiB) | integer | worker |
MEM_PII_MB | pii · memory limit (MiB) | integer | pii |
MEM_KEYCLOAK_MB | keycloak · memory limit (MiB) | integer | keycloak |
MEM_POSTGRES_MB | postgres · memory limit (MiB) | integer | postgres |
MEM_VALKEY_MB | valkey · memory limit (MiB) | integer | valkey |
MEM_PORTAL_MB | portal · memory limit (MiB) | integer | portal |
MEM_MARKETING_MB | marketing · memory limit (MiB) | integer | marketing |
MEM_PROMETHEUS_MB | prometheus · memory limit (MiB) | integer | prometheus |
MEM_NODE_EXPORTER_MB | node_exporter · memory limit (MiB) | integer | node-exporter |
MEM_NTFY_MB | ntfy · memory limit (MiB) | integer | ntfy |
MEM_STALWART_MB | stalwart · memory limit (MiB) | integer | stalwart |
Observability
| Key | Purpose | Type | Affected services |
|---|---|---|---|
MEM_GREPTIMEDB_MB | greptimedb · memory limit (MiB) | integer | greptimedb |
MEM_PERSES_MB | perses · memory limit (MiB) | integer | perses |
MEM_OTEL_COLLECTOR_MB | otel_collector · memory limit (MiB) | integer | otel-collector |
MEM_CHAT_EXPORTER_MB | chat_exporter · memory limit (MiB) | integer | chat-exporter |
OBS_S3_BUCKET | GreptimeDB S3 bucket | string | greptimedb |
OBS_S3_REGION | GreptimeDB AWS region | string | greptimedb |
OBS_S3_PREFIX | GreptimeDB object prefix | string | greptimedb |
OBS_S3_ACCESS_KEY_ID | GreptimeDB S3 access key ID | secret | greptimedb |
OBS_S3_SECRET_ACCESS_KEY | GreptimeDB S3 secret access key | secret | greptimedb |
OBS_METRICS_RETENTION_DAYS | Metrics retention (days) | integer | otel-collector |
OBS_LOGS_RETENTION_DAYS | Log retention (days) | integer | otel-collector |
OBS_TRACES_RETENTION_DAYS | Trace retention (days) | integer | otel-collector |
OTEL_TRACES_SAMPLER_ARG | Trace sampling ratio (0–1) | decimal | gateway, control, billing, worker, pii, chat-exporter |